--- title: "When Your CMMC Enclave Provider Closes Its Doors: Why Ownership Matters More Than Ever" description: In the wake of your CMMC compliance vendor closing its doors, what happens to your CUI and your compliance? And what should you do next? image: https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20enclave%20provider%20closing%20doors/enclave-closing-doors.webp --- [Skip to Main Content](https://www.virtru.com/blog/compliance/cmmc-provider-closing-doors#main-content) [Sign In](https://secure.virtru.com/dashboard) [I received a Virtru email](https://www.virtru.com/data-protection-platform/email-encryption/send) [![Virtru](https://www.virtru.com/hubfs/assets/images/logos/virtru/blue/virtru_LOGOMASTER_BLUE.svg) ](https://www.virtru.com/) - Products - Solutions - Developers - Company - Resources - [Support](https://support.virtru.com) - [Pricing](https://www.virtru.com/data-security-platform/pricing-packages) - Book a Demo - Search all Virtru content ![](https://www.virtru.com/hubfs/assets/images/icons/link-arrow-black.svg) Email Workflows Protect data shared via email - [Virtru for Gmail ](https://www.virtru.com/data-security-platform/email-encryption/gmail) - [Virtru for Outlook ](https://www.virtru.com/data-security-platform/email-encryption/outlook) - [Virtru Gateway ](https://www.virtru.com/data-security-platform/virtru-data-gateway) - [Email Integrations ](https://www.virtru.com/products/integrations?product=data_protection_gateway&category=email) File Workflows Protect files shared across your workflows - [Virtru Secure Share ](https://www.virtru.com/data-security-platform/virtru-secure-share) - [Virtru for Desktop ](https://www.virtru.com/data-security-platform/desktop) - [File Integrations ](https://www.virtru.com/products/integrations?category=file_sharing) Collaboration Workflows FedRAMP authorized file storage and collaboration - [Virtru Collaborate ](https://www.virtru.com/data-security-platform/virtru-collaborate) Manage Private Encryption Keys Maintain complete sovereignty and governance - [Virtru Private Keystore ](https://www.virtru.com/data-security-platform/virtru-private-keystore) - [Google Client Side Encryption (CSE) ](https://www.virtru.com/data-security-platform/google-workspace-client-side-encryption) Develop Data Security Solutions Data-centric security, built on open standards - [Virtru Data Security Platform ](https://www.virtru.com/data-security-platform) - [Developer Experience ](https://www.virtru.com/data-security-platform/developer-experience) - [Platform Integrations ](https://www.virtru.com/partners/technology) 6,100+ Customers Trust Virtru for Data Security and Privacy Protection ![Omada Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/omada-logo.webp) ![UC Berkley Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/ucberkley-logo.webp) ![Associated Press Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/associatedpress-logo.webp) ![US Department of Defense Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/dod-logo.webp) - Compliance - [CJIS ](https://www.virtru.com/compliance/cjis) - [CMMC / NIST / DFARS ](https://www.virtru.com/compliance/cmmc) - [FERPA ](https://www.virtru.com/compliance/ferpa) - [FTC Safeguards Rule ](https://www.virtru.com/compliance/data-encryption-ftc-safeguards-rule) - [GDPR ](https://www.virtru.com/compliance/gdpr) - [HIPAA ](https://www.virtru.com/compliance/hipaa-email) - [ISO 27001 ](https://www.virtru.com/compliance/iso-27001) - [ITAR ](https://www.virtru.com/compliance/itar) - [PCI / GLBA / FINRA / SOX ](https://www.virtru.com/compliance/financial) - Commercial - [Aerospace ](https://www.virtru.com/industry-solutions/aerospace-and-defense/) - [Education ](https://www.virtru.com/industry-solutions/education/) - [Finance ](https://www.virtru.com/industry-solutions/financial-services/) - [Healthcare ](https://www.virtru.com/industry-solutions/healthcare/) - [Legal ](https://www.virtru.com/industry-solutions/legal) - [Technology & Telecom ](https://www.virtru.com/industry-solutions/telecom-it-and-software) - [Threat Intelligence ](https://www.virtru.com/industry-solutions/threat-intelligence) - Global Public Sector - [Federal - Defense ](https://www.virtru.com/global-public-sector/defense) - [Federal - Intelligence ](https://www.virtru.com/global-public-sector/intelligence) - [State & Local Government ](https://www.virtru.com/industry-solutions/state-local-government) - [Systems Integrators ](https://www.virtru.com/global-public-sector/systems-integrators) - [Mission Partner Environments ](https://www.virtru.com/industry-solutions/mission-partner-environments) [View All Solutions](https://www.virtru.com/compliance) [![Three rings forming three overlaps in a triangle formation](https://www.virtru.com/hubfs/assets/images/icons/rings-navicon.svg) Virtru for Global Mission Partners Data-centric security aligned with ACP-240 and TDF Learn More ](https://www.virtru.com/industry-solutions/mission-partner-environments) [![Microsoft Icon](https://www.virtru.com/hubfs/assets/images/icons/microsoft-navicon.svg) Virtru for Microsoft 365 Protect data stored and shared via Microsoft 365 Learn More ](https://www.virtru.com/data-security-platform/microsoft-365) [![Google Icon](https://www.virtru.com/hubfs/assets/images/icons/google-navicon.svg) Virtru for Google Workspace Protect data stored and shared via Google Workspace Learn More ](https://www.virtru.com/data-security-platform/google-workspace) - Developers - [Virtru Data Security Platform The Security Standard that Powers Our Products ](https://www.virtru.com/data-security-platform) - [Trusted Data Format Secure Collaboration and Policy Enforcement ](https://www.virtru.com/data-security-platform/trusted-data-format) - [Virtru Developer Experience Build Secure Solutions from the Ground Up ](https://www.virtru.com/data-security-platform/developer-experience) - Developer Community - [OpenTDF: Open Source Project Open Standard Now Available on GitHub ](https://opentdf.io/) - [Technology Partners Building integrations with the Virtru Platform ](https://www.virtru.com/partners/technology) - [Partner Training Bootcamp Request training on the Virtru Data Security Platform ](https://www.virtru.com/data-security-platform/training-request) ![Looking over the shoulder of somebody on their smart phone. ](https://www.virtru.com/hubfs/assets/images/stock%20photos/People%20On%20Device/person-on-phone.webp) A trusted platform for secure data sharing Built on the open TDF standard, the Virtru Data Security Platform provides persistent control over the information you share with others. [Virtru Data Security Platform](https://www.virtru.com/data-security-platform) - About Virtru - [About Us ](https://www.virtru.com/about-us) - [Leadership ](https://www.virtru.com/leadership/) - [Careers & Culture ](https://www.virtru.com/careers) - [Contact Us ](https://www.virtru.com/contact-us) - In the News - [Headlines & Press Releases ](https://www.virtru.com/newsroom) - [Decrypted Blog ](https://www.virtru.com/blog) - [Hash It Out Podcast ](https://www.virtru.com/hash-it-out) Award-winning security solutions for every organization ![Cyber Security Breakthrough Award Logo for 2023](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/cybersecurity-breakthrough-award-badge-2023.webp) ![Virtru wins a G2 Top 50 Security Products Award for 2024](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/G2-Leader-2025.webp) ![Washington Post Top Work Places 2023 Award](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/twp-washington-2023.webp) ![Inc Power Partner 2024](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/IncPowerPartner-2024.webp) [Read Customer Reviews](https://www.virtru.com/why-virtru/reviews) - Resources - [Decrypted Blog Tips, Takes, and Expertise ](https://www.virtru.com/blog) - [Hash It Out Podcast Join us as we talk about cybersecurity ](https://www.virtru.com/hash-it-out) - [Voice of the Customer Case Studies, Webinars, and Videos ](https://www.virtru.com/resources?type=webinar,case-study) - [Events & Webinars Upcoming Events, Conferences, and Digital Webinars ](https://www.virtru.com/events-and-webinars/) - [Resource Library Whitepapers, Guides, and Videos ](https://www.virtru.com/resources) - [DMV Rising Our annual event bringing together the cyber community in the DMV ](https://dmvrising.com/) - [Headlines & Press Virtru in the News ](https://www.virtru.com/newsroom) - [Product Updates The latest on new products, features, and fixes ](https://www.virtru.com/products/updates) - [Virtru Academy Live Helpful how-to content for admins and end users ](https://www.virtru.com/virtru-academy-live) ![Professional on a laptop](https://www.virtru.com/hubfs/assets/images/stock%20photos/business/Business-3.webp) ![Wealthforge Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/Wealthforge%20Logo.webp) 100% Increase in delivery rate for a broker-dealer working to comply with SEC regulations. [Read the Case Study](https://www.virtru.com/case-studies/wealthforge-sec-compliance-gateway) - Products - Email Workflows Protect data shared via email - [Virtru for Gmail ](https://www.virtru.com/data-security-platform/email-encryption/gmail) - [Virtru for Outlook ](https://www.virtru.com/data-security-platform/email-encryption/outlook) - [Virtru Gateway ](https://www.virtru.com/data-security-platform/virtru-data-gateway) - [Email Integrations ](https://www.virtru.com/products/integrations?product=data_protection_gateway&category=email) - File Workflows Protect files shared across your workflows - [Virtru Secure Share ](https://www.virtru.com/data-security-platform/virtru-secure-share) - [Virtru for Desktop ](https://www.virtru.com/data-security-platform/desktop) - [File Integrations ](https://www.virtru.com/products/integrations?category=file_sharing) - Collaboration Workflows FedRAMP authorized file storage and collaboration - [Virtru Collaborate ](https://www.virtru.com/data-security-platform/virtru-collaborate) - Manage Private Encryption Keys Maintain complete sovereignty and governance - [Virtru Private Keystore ](https://www.virtru.com/data-security-platform/virtru-private-keystore) - [Google Client Side Encryption (CSE) ](https://www.virtru.com/data-security-platform/google-workspace-client-side-encryption) - Develop Data Security Solutions Data-centric security, built on open standards - [Virtru Data Security Platform ](https://www.virtru.com/data-security-platform) - [Developer Experience ](https://www.virtru.com/data-security-platform/developer-experience) - [Platform Integrations ](https://www.virtru.com/partners/technology) - Solutions - Compliance - [CJIS ](https://www.virtru.com/compliance/cjis) - [CMMC / NIST / DFARS ](https://www.virtru.com/compliance/cmmc) - [FERPA ](https://www.virtru.com/compliance/ferpa) - [FTC Safeguards Rule ](https://www.virtru.com/compliance/data-encryption-ftc-safeguards-rule) - [GDPR ](https://www.virtru.com/compliance/gdpr) - [HIPAA ](https://www.virtru.com/compliance/hipaa-email) - [ISO 27001 ](https://www.virtru.com/compliance/iso-27001) - [ITAR ](https://www.virtru.com/compliance/itar) - [PCI / GLBA / FINRA / SOX ](https://www.virtru.com/compliance/financial) - Commercial - [Aerospace ](https://www.virtru.com/industry-solutions/aerospace-and-defense/) - [Education ](https://www.virtru.com/industry-solutions/education/) - [Finance ](https://www.virtru.com/industry-solutions/financial-services/) - [Healthcare ](https://www.virtru.com/industry-solutions/healthcare/) - [Legal ](https://www.virtru.com/industry-solutions/legal) - [Technology & Telecom ](https://www.virtru.com/industry-solutions/telecom-it-and-software) - [Threat Intelligence ](https://www.virtru.com/industry-solutions/threat-intelligence) - Global Public Sector - [Federal - Defense ](https://www.virtru.com/global-public-sector/defense) - [Federal - Intelligence ](https://www.virtru.com/global-public-sector/intelligence) - [State & Local Government ](https://www.virtru.com/industry-solutions/state-local-government) - [Systems Integrators ](https://www.virtru.com/global-public-sector/systems-integrators) - [Mission Partner Environments ](https://www.virtru.com/industry-solutions/mission-partner-environments) - Developers - Developers - [Virtru Data Security Platform The Security Standard that Powers Our Products ](https://www.virtru.com/data-security-platform) - [Trusted Data Format Secure Collaboration and Policy Enforcement ](https://www.virtru.com/data-security-platform/trusted-data-format) - [Virtru Developer Experience Build Secure Solutions from the Ground Up ](https://www.virtru.com/data-security-platform/developer-experience) - Developer Community - [OpenTDF: Open Source Project Open Standard Now Available on GitHub ](https://opentdf.io/) - [Technology Partners Building integrations with the Virtru Platform ](https://www.virtru.com/partners/technology) - [Partner Training Bootcamp Request training on the Virtru Data Security Platform ](https://www.virtru.com/data-security-platform/training-request) - Company - About Virtru - [About Us ](https://www.virtru.com/about-us) - [Leadership ](https://www.virtru.com/leadership/) - [Careers & Culture ](https://www.virtru.com/careers) - [Contact Us ](https://www.virtru.com/contact-us) - In the News - [Headlines & Press Releases ](https://www.virtru.com/newsroom) - [Decrypted Blog ](https://www.virtru.com/blog) - [Hash It Out Podcast ](https://www.virtru.com/hash-it-out) - Resources - Resources - [Decrypted Blog Tips, Takes, and Expertise ](https://www.virtru.com/blog) - [Hash It Out Podcast Join us as we talk about cybersecurity ](https://www.virtru.com/hash-it-out) - [Voice of the Customer Case Studies, Webinars, and Videos ](https://www.virtru.com/resources?type=webinar,case-study) - [Events & Webinars Upcoming Events, Conferences, and Digital Webinars ](https://www.virtru.com/events-and-webinars/) - [Resource Library Whitepapers, Guides, and Videos ](https://www.virtru.com/resources) - [DMV Rising Our annual event bringing together the cyber community in the DMV ](https://dmvrising.com/) - [Headlines & Press Virtru in the News ](https://www.virtru.com/newsroom) - [Product Updates The latest on new products, features, and fixes ](https://www.virtru.com/products/updates) - [Virtru Academy Live Helpful how-to content for admins and end users ](https://www.virtru.com/virtru-academy-live) - [Support](https://support.virtru.com) - [Pricing](https://www.virtru.com/data-security-platform/pricing-packages) - Book a Demo - Search all Virtru content ![](https://www.virtru.com/hubfs/assets/images/icons/link-arrow-black.svg) CMMC/NIST/DFARS May 05, 2026 # When Your CMMC Enclave Provider Closes Its Doors: Why Ownership Matters More Than Ever ![Andrew Lynch](https://www.virtru.com/hubfs/andrew%20lynch%20new%20headshot.jpg) By Andrew Lynch Share post: [![Share on Facebook](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-facebook.png?noresize&width=24&name=icon-blog-facebook.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fcompliance%2Fcmmc-provider-closing-doors%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-linkedin.png?noresize&width=24&name=icon-blog-linkedin.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fcompliance%2Fcmmc-provider-closing-doors%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://www.virtru.com/hs-fs/hubfs/opentdf/assets/images/icons/x-logo.webp?width=24&name=x-logo.webp)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fcompliance%2Fcmmc-provider-closing-doors%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fcompliance%2Fcmmc-provider-closing-doors%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=When%20Your%20CMMC%20Enclave%20Provider%20Closes%20Its%20Doors%3A%20Why%20Ownership%20Matters%20More%20Than%20Ever) ## TABLE OF CONTENTS See Virtru In Action Book a Demo Share post: [![Share on Facebook](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-facebook.png?noresize&width=24&name=icon-blog-facebook.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fcompliance%2Fcmmc-provider-closing-doors%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-linkedin.png?noresize&width=24&name=icon-blog-linkedin.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fcompliance%2Fcmmc-provider-closing-doors%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://www.virtru.com/hs-fs/hubfs/opentdf/assets/images/icons/x-logo.webp?width=24&name=x-logo.webp)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fcompliance%2Fcmmc-provider-closing-doors%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Fcompliance%2Fcmmc-provider-closing-doors%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=When%20Your%20CMMC%20Enclave%20Provider%20Closes%20Its%20Doors%3A%20Why%20Ownership%20Matters%20More%20Than%20Ever) ![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20enclave%20provider%20closing%20doors/enclave-closing-doors.webp) The defense industrial base (DIB) was recently rocked by news that a well-known CMMC enclave provider abruptly shut its doors, leaving customers scrambling for answers, uncertain about the security of their Controlled Unclassified Information (CUI), and suddenly facing an interrupted path to CMMC certification. No warning. No transition plan. Just a door closed and a compliance program thrown into crisis. For the organizations caught in that wake, the questions came fast: *Who holds my data? Can I still access it? Where does my CMMC journey go from here?* This moment exposes one of the most under-discussed debates in CMMC compliance: **Are you renting your compliance, or do you actually own it?** ## The "Own vs. Rent" Problem in CMMC The CMMC compliance market has grown rapidly, and with it, a wide spectrum of vendors promising to make the path to certification easier. At the extremes of that spectrum sit two very distinct models. ### The Renting Model On one end, you have the **"renting" model** — the managed enclave approach where a vendor stands up your entire compliance environment on their infrastructure, holds your encryption keys, controls your tenant, and manages your logs. Many lower-cost providers operate on a pay-to-play service model. The initial cost is lower, but the long-term costs can be much higher. This means your provider holds the keys to the tenant, the policies, and the logs — and you are renting your enclave. It sounds convenient, until your provider disappears. Then you realize you never owned anything at all. This model is beneficial to a provider as it keeps a business locked in to their service. Switching providers at any point will require a business to purchase a new enclave and, in many cases, undergo another CMMC Level 2 assessment. You’re completely dependent on the compliance service that’s supposed to help you stand on your own. ### The Owning Model On the other end, you have the **"owning" model** — building everything in-house. Full control. Full responsibility. Building an enclave internally requires dedicated IT and security expertise, plus significant ongoing maintenance. Most SMBs underestimate the cost of this, which can hit over $100k on **compliance staffing alone.** For most small and mid-sized defense contractors, this path is simply not realistic. So where does that leave you? ## The False Choice, and the Real Answer The good news is that **owning vs. renting is a false binary**, and the story of CMMC compliance doesn't have to end at either extreme. There is a smarter middle ground, one where you benefit from proven technology without surrendering control of your most sensitive data. **That's precisely where Virtru lives.** ## So Your Enclave Provider Closed. What Now? If your CMMC enclave provider has shut down, you are dealing with a compliance emergency on someone else's timeline. Here is what to do, in order. **Get a copy of your data immediately.** Before anything else, attempt to retrieve or export all CUI stored in your provider's environment. Contact their legal counsel or any court-appointed trustee about your data retrieval rights. Do not assume the data will remain accessible as the business winds down. **Find out who holds your encryption keys.** And, what happens in the case that your new vendor shuts down. If your provider held your keys (common in managed enclave models) you need to understand the status of that key material today. Keys that are inaccessible or unaccounted for are a compliance and operational problem, not just a vendor problem. Document everything you know about your key custody and escalate if there are gaps. And when surveying a new vendor, find out if you have the option to self-host or manage your own keys. **Inventory your CUI.** If you don't have a current, complete list of what CUI was stored, transmitted, or processed in your provider's environment, build one now from contracts, email records, shared files, and system logs. Your assessor will need this. Your contracting officer may need it sooner. **Document the disruption to your compliance timeline.** If you were mid-assessment, preparing for an assessment, or operating under an active CMMC requirement, document the specific gap created by the closure. CMMC assessors and DoD stakeholders are aware of the situation. A clear, factual record of your compliance posture before the disruption and the actions you took after it is your best protection. **Don't let urgency push you into another bad deal.** The pressure to find a replacement quickly is real, and vendors know it. A rushed decision that puts you back into another managed enclave with the same lock-in structure recreates the same risk. Take time (even a few days) to ask the ownership questions before signing anything: Who controls the keys? What happens to my data if the vendor closes? Can I take my compliance artifacts with me? ## Virtru: The Middle Ground Built on Genuine Data Ownership Virtru's approach to CMMC is fundamentally different from a traditional enclave model. We are not a full-stack enclave provider. We don't claim to solve every control or manage your entire compliance environment. Virtru supports **27 of the 110 CMMC Level 2 controls**, as outlined in our Shared Responsibility Matrix. While Virtru will be just one component of your overall CMMC strategy, it can address a significant portion of requirements that demonstrate proper protection and access control for CUI. We say this not as a caveat. We say it as a point of pride, because **honesty about scope is the foundation of a defensible compliance program.** Virtru has chosen a conservative approach, identifying a maximum of 27 controls where our technology directly contributes to compliance objectives. This transparency helps organizations clearly understand where our solution provides genuine value and what responsibilities remain theirs to address through other means. ***A word of caution:** If your vendor is claiming 90+ of the 110 controls, [ask them to show their work](https://www.virtru.com/blog/compliance/cmmc/vendor-promises) … because your CMMC assessment will. Do not necessarily fall for the vendor who claims the highest number of controls on their marketing collateral. A vendor that is honest about the 27 controls they actually solve is a partner. A vendor that claims to solve 102 controls by taking credit for Amazon's security guards is a liability to your business.* ## You Hold the Keys. Literally. One of the most important overlooked questions in evaluating any CMMC compliance solution is deceptively simple. *Who controls the encryption keys that protect your CUI?* In most traditional enclave or managed service models, the answer is: *your vendor*. The encryption keys that protect your most sensitive data live in infrastructure owned and operated by a third party. If that vendor shuts down, gets acquired, or simply decides to change their terms — your access, your data, and your compliance posture are all at risk. It's worth understanding that most encryption architectures (including Virtru's) involve more than one key. Understanding how those keys are managed, who holds them, and where they live is important to evaluating whether you truly have control over your data. *With Virtru, you have a choice that most vendors don't offer.* By default, Virtru manages key services on your behalf in a FedRAMP-authorized environment, making deployment fast and operationally straightforward. But for organizations that require a higher degree of control, Virtru offers the Virtru Private Keystore, giving you the option to host your own encryption keys in the location of your choice: on-premises, or in a public or private cloud of your choosing. This means that even if something changes at the vendor level, your keys and your data remain under your control. That's a meaningful distinction in a world where compliance programs have been upended by a vendor's unexpected exit. ## Defense-in-Depth, Not a Silver Bullet We believe in honesty. **No single vendor can get you to 100% CMMC compliance.** Compliance requires a comprehensive security program with multiple technology layers working together, and no single vendor addresses all practices. Virtru specifically focuses on data protection controls and integrates with your broader security architecture, including your: - Threat detection platforms - SIEM solutions - Endpoint protection tools - Network security infrastructure We're designed to be **one strong layer in your defense-in-depth strategy**, not a standalone solution. That's the healthy, sustainable model. Virtru is your data-centric security partner in an ecosystem of trusted tools — not a vendor you're locked into, not a landlord who can evict you from your own compliance program. ## What Virtru Does for CMMC At a Glance Here's how Virtru directly supports your CMMC Level 2 certification journey: | **Capability** | **Details** | | --- | --- | | [**27 of 110 CMMC Level 2 Controls**](https://www.virtru.com/compliance/cmmc) | Across Access Control, Audit & Accountability, and Systems & Communications Protection domains | | [**FedRAMP Moderate Authorized**](https://www.fedramp.gov/marketplace/products/F1605037894/) | Maintains a FedRAMP Moderate ATO covering the Virtru Data Security Platform | | [**FIPS 140-2 Validated Encryption**](https://trust.virtru.com/docs/compliance/fips) | Military-grade encryption applied to every CUI object via our validated VirtruCrypto module | | [**Virtru Private Keystore**](https://www.virtru.com/data-security-platform/virtru-private-keystore) | You can optionally retain control of encryption keys, on-premises or in a cloud of your choice | | **Access to Audit Logs** | Audit who has accessed CUI, when, where, and for how long. Export event logs for analysis or integrate with your SIEM for advanced threat intelligence. | | **End-to-End Encrypted Email & File Sharing** | Seamlessly protect CUI shared with primes, subcontractors, agencies, and mission partners | | **Access Revocation & Expiration Controls** | Change or revoke access permissions at any time, even after data leaves your organization | | [**Shared Responsibility Matrix**](https://www.virtru.com/whitepapers/cmmc-compliance-support-encryption) | Clearly documents which controls are Virtru's responsibility, yours, or shared | | **Zero Trust Data Architecture** | Strengthens your Zero Trust posture aligned with [DoD Zero Trust architecture](https://www.virtru.com/hubfs/assets/pdf/resources/data%20sheets/How-Virtru-Supports-DOD-ZeroTrust.pdf?hsLang=en) | | **Works with Microsoft Commercial & Google Workspace** | No forced migration required | | [**CMMC Compliance Champions Program**](https://www.virtru.com/virtru-compliance-champions) | Access to a community of trusted CMMC advisors and the Virtru Trust Center |   Recommended Reading:  ## Built to Work With What You Already Have One of the most disruptive aspects of traditional enclave solutions is the migration burden they impose. Many providers require you to abandon your existing cloud environment and re-platform entirely; a costly, time-consuming, and operationally disruptive process. Virtru was designed differently. **Microsoft GCC isn't required for CMMC compliance.** With Virtru, you can manage CUI securely in a FedRAMP-authorized environment, even if you use Microsoft Commercial Cloud or Google Workspace for sharing CUI through email. Here’s what that looks like in practice: - [**Virtru for Microsoft 365**](https://www.virtru.com/data-security-platform/email-encryption/outlook) — encrypts CUI in Outlook email and Microsoft 365 files without requiring GCC High or a tenant migration - [**Virtru for Google Workspace**](https://www.virtru.com/data-security-platform/email-encryption/gmail) — protects CUI in Gmail and Google Drive with the same persistent, attribute-based encryption - [**Virtru Secure Share**](https://www.virtru.com/data-security-platform/virtru-secure-share) — if your enclave going dark means you've lost a secure channel for sending and receiving CUI with primes, subcontractors, and agencies, Secure Share restores that capability immediately, with no recipient install required - [**Virtru Private Keystore**](https://www.virtru.com/data-security-platform/virtru-private-keystore) — deploy and manage your own encryption keys in your own infrastructure, on-premises or in a cloud of your choice, so your compliance posture is never again contingent on a vendor's business decisions ## Don't Let a Vendor Hold Your Compliance Hostage The news of an enclave provider shutting down is a sobering reminder that **your compliance posture is only as stable as the foundation it's built on.** If that foundation is owned by someone else, you are one business decision (theirs, not yours) away from starting over. Virtru gives you the middle ground the DIB deserves: - **Enterprise-grade, FedRAMP-authorized data protection** - **Support for 27 critical CMMC Level 2 controls** - **Seamless integration into your existing environment** - **You remain in control of your data and your keys**   **Your compliance journey shouldn't be derailed by someone else's business problems.** We're here to help, and for DIB contractors affected by the NeoSystems shutdown we’re offering a month free. [**Schedule a conversation with our team today**](https://docs.google.com/document/d/1UoXRXrqbTLvHESnXts2rzHuglYlOiC0xuusZvK9hRx8/edit#) and let's talk about where Virtru fits in your path to CMMC Level 2. *Virtru is a FedRAMP Authorized data security platform trusted by hundreds of organizations in the Defense Industrial Base. Learn more at [virtru.com/cmmc](https://www.virtru.com/compliance/cmmc).* ![Andrew Lynch](https://www.virtru.com/hubfs/andrew%20lynch%20new%20headshot.jpg) ### Andrew Lynch A VP at Virtru, Andrew Lynch works closely with a wide range of customers in InfoSec roles, many of whom are on the front lines of CMMC, ITAR, and other advanced compliance needs for global organizations. [View more posts by Andrew Lynch](https://www.virtru.com/blog/author/andrew-lynch) See Virtru In Action Book a Demo Sign Up for the Virtru Newsletter ## Dive Deeper ![](https://www.virtru.com/hubfs/assets/images/icons/left-arrow-circle-blue.webp) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20cyera%20oasis/cyera-oasis.webp) Commentary July 29, 2026 ### The Coin Has Two Sides: What Cyera's Acquisition of Oasis Tells Us About the Future of Security ](https://www.virtru.com/blog/data-centric-security/cyera-oasis) [![](https://www.virtru.com/hubfs/26-Competitor-Blog%20-%20Virtru%20vs%20Box%20copy.webp) File Encryption July 28, 2026 ### Virtru Collaborate vs. Box: Secure File Sharing for Businesses of Any Size ](https://www.virtru.com/blog/virtru-collaborate-vs-box-enterprise) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20william%20mcborrough%20recap/cmmc-compass-will-mcborrough.webp) Compliance July 22, 2026 ### The $600,000 Problem: What the CMMC Pause Actually Revealed About the Defense Industrial Base ](https://www.virtru.com/blog/compliance/mcglobaltech-cmmc-compass) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20three%20stories/three-stories.webp) Zero Trust July 21, 2026 ### Last Week in Critical Infrastructure: Three Stories You Should Read as One ](https://www.virtru.com/blog/data-centric-security/three-stories-converge) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20cmmc%20on%20hold/CMMC-Pause-CUI-Not.webp) Public Sector July 14, 2026 ### CMMC Phase II Is Officially on Hold. NIST and DFARS aren't. ](https://www.virtru.com/blog/compliance/cmmc-phase-2-on-hold-nist-dfars) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/2026%20Newsletter%20Assets/jk-HIO.png) Zero Trust July 10, 2026 ### We Asked Kindervag: Why Are So Many Organizations Still Getting Zero Trust Wrong? ](https://www.virtru.com/blog/zero-trust/kindervag-yeske) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20ShareFile%20Takedown/26-Competitor-Blog-Blog%20-%20Virtru%20vs%20Sharefile.jpg) File Encryption July 10, 2026 ### Looking for a ShareFile Alternative? Here's What Regulated Organizations Need to Know. ](https://www.virtru.com/blog/file-encryption/citrix-progress-sharefile) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20sendsafely%20takedown/26-Competitor-Blog-Blog%20-%20Virtru%20vs%20SendSafely%20(1).jpg) File Encryption July 08, 2026 ### SendSafely vs. Virtru: Which Secure File Sharing Platform Protects Your Data After Download? ](https://www.virtru.com/blog/file-encryption/sendsafely) [![](https://www.virtru.com/hubfs/assets/images/blog/26-Competitor-Blog-Blog%20-%20Virtru%20vs%20Dropbox.webp) File Encryption July 07, 2026 ### Dropbox Alternatives for Secure File Sharing: What IT Teams Are Missing ](https://www.virtru.com/blog/dropbox-alternatives-secure-file-sharing) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20alex%20karp/alex-karp.jpg) Commentary July 07, 2026 ### Alex Karp Is Right About the AI Problem. He's Missing the Solution. ](https://www.virtru.com/blog/zero-trust/alex-karp-palantir-data-sovereignty) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20SACR%20Report/anna-perrone-commentary%20copy.webp) Email Encryption June 29, 2026 ### The Email Security Report Every CISO Should Read, And the Questions It Should Inspire ](https://www.virtru.com/blog/email-security/sacr-anna-perrone-report-2026) ![](https://www.virtru.com/hubfs/assets/images/icons/right-arrow-circle-blue.webp) ## Book a Demo ## Become a Partner Contact us to learn more about our partnership opportunities. ## Become a Compliance Champion Contact us to learn more about our partnership opportunities. - Products - [Product Overview](https://www.virtru.com/data-security-platform/product-overview) - [Virtru for Google Workspace](https://www.virtru.com/data-security-platform/google-workspace) - [Virtru for Microsoft 365](https://www.virtru.com/data-security-platform/microsoft-365) - [Data Protection Gateway](https://www.virtru.com/data-security-platform/virtru-data-gateway) - [Pricing](https://www.virtru.com/data-security-platform/pricing-packages) - Compliance - [HIPAA](https://www.virtru.com/compliance/hipaa-email) - [ITAR](https://www.virtru.com/compliance/itar) - [GDPR](https://www.virtru.com/compliance/gdpr) - [CJIS](https://www.virtru.com/compliance/cjis) - [NIST CUI](https://www.virtru.com/compliance/nist) - [CCPA](https://www.virtru.com/compliance/ccpa) - [FERPA](https://www.virtru.com/compliance/ferpa) - [CMMC](https://www.virtru.com/compliance/cmmc) - Industries - [Healthcare](https://www.virtru.com/industry-solutions/healthcare/) - [Education](https://www.virtru.com/industry-solutions/education/) - [IT & Software](https://www.virtru.com/industry-solutions/telecom-it-and-software) - [Federal Government](https://www.virtru.com/global-public-sector) - [State & Local Government](https://www.virtru.com/industry-solutions/state-local-government) - [Manufacturing](https://www.virtru.com/industry-solutions/manufacturing) - [Financial Services](https://www.virtru.com/industry-solutions/financial-services/) - Platform - [Email Encryption](https://www.virtru.com/data-security-platform/email-encryption) - [File Encryption](https://www.virtru.com/data-security-platform/file-encryption) - [Platform Architecture](https://www.virtru.com/data-security-platform/saas) - [Trusted Data Format](https://www.virtru.com/data-security-platform/trusted-data-format) - [Secure Reader](https://www.virtru.com/data-security-platform/secure-collaboration) - [Audit and Control](https://www.virtru.com/data-security-platform/audit-and-control) - [Encryption Key Management](https://www.virtru.com/data-security-platform/virtru-private-keystore) - Resources - [About Virtru](https://www.virtru.com/about-us) - [Blog](https://www.virtru.com/blog) - [Careers](https://www.virtru.com/careers) - [Leadership & Investors](https://www.virtru.com/leadership/) - [News & Press](https://www.virtru.com/press) - [Partners](https://www.virtru.com/partners/) - [Intellectual Property](https://www.virtru.com/intellectual-property/) - [Security Certifications](https://www.virtru.com/data-security-platform/compliance) - Resource Library - Contact Us - [Contact Us](https://www.virtru.com/contact-us) - [Support](https://support.virtru.com/) - [Sales](https://www.virtru.com/contact-us) - [Become a Partner](https://www.virtru.com/blog/compliance/cmmc-provider-closing-doors#footer) - [Report a Vulnerability](https://www.virtru.com/responsible-disclosure/) [![Virtur Logo](https://www.virtru.com/hubfs/assets/images/logos/virtru/white/tagline/virtru_TAGLINE_LOGOMASTER_WHITE-01.svg)](https://www.virtru.com/) Subscribe to Our Newsletter [![X Icon](https://www.virtru.com/hubfs/assets/images/icons/x-white.svg)](https://x.com/virtruprivacy) [![LinkedIn Icon](https://www.virtru.com/hubfs/assets/images/icons/linkedin-white.svg)](https://www.linkedin.com/company/virtru) [![Youtube Icon](https://www.virtru.com/hubfs/assets/images/icons/youtube-white.svg)](https://www.youtube.com/@Virtru) © 2026 Virtru · 1801 Pennsylvania Ave NW, 5th Floor, Washington, DC 20006 [Terms](https://www.virtru.com/terms-of-service) & [Privacy](https://www.virtru.com/privacy-policy) | [Cookie Policy](https://www.virtru.com/cookie-policy) & [Preferences ![Pivacy Options logo](https://oag.ca.gov/sites/all/files/agweb/images/privacy/privacyoptions.svg)](https://www.virtru.com/blog/compliance/cmmc-provider-closing-doors#footer) | [Do Not Sell My Personal Information](https://www.virtru.com/blog/compliance/cmmc-provider-closing-doors#footer) | [Virtru Trust Center](https://trust.virtru.com/?_ga=2.215796503.1200908638.1747067694-1753239414.1744322796&_gac=1.175361302.1744660048.EAIaIQobChMIppzvranJjAMVN0pHAR3F7gNdEAAYAiAAEgL4qfD_BwE) ```json { "@context" : "https://schema.org", "@id" : "https://www.virtru.com/#organization", "@type" : "Organization", "description" : "Virtru is a data security platform delivering end-to-end encryption and access control for email, files and apps. Trusted by enterprise and defense leaders", "logo" : "https://www.virtru.com/hubfs/assets/images/logos/virtru/blue/virtru_LOGOMASTER_BLUE_HighRes.png", "name" : "Virtru", "sameAs" : [ "https://www.facebook.com/virtruprivacy", "https://www.x.com/virtruprivacy", "https://www.linkedin.com/company/virtru", "https://www.reddit.com/user/virtru_privacy", "https://www.youtube.com/@Virtru" ], "url" : "https://www.virtru.com/" } ``` ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Andrew Lynch", "url" : "https://www.virtru.com/blog/author/andrew-lynch" }, "dateModified" : "2026-05-05T20:10:18.397Z", "datePublished" : "2026-05-05T17:15:26.000Z", "headline" : "When Your CMMC Enclave Provider Closes Its Doors: Why Ownership Matters More Than Ever", "image" : [ "https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20enclave%20provider%20closing%20doors/enclave-closing-doors.webp" ], "mainEntityOfPage" : { "@id" : "https://www.virtru.com/blog/compliance/cmmc-provider-closing-doors", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.virtru.com/hubfs/virtru2022/images/Virtru%20Logo%20Blue%20(2).svg" }, "name" : "Virtru" } } ``` ```json { "@context" : "https://schema.org", "@type" : "ItemList", "itemListElement" : [ { "@type" : "SiteNavigationElement", "name" : "Products", "position" : 1 }, { "@type" : "SiteNavigationElement", "name" : "Solutions", "position" : 2 }, { "@type" : "SiteNavigationElement", "name" : "Developers", "position" : 3 }, { "@type" : "SiteNavigationElement", "name" : "Company", "position" : 4 }, { "@type" : "SiteNavigationElement", "name" : "Resources", "position" : 5 }, { "@type" : "SiteNavigationElement", "name" : "Support", "position" : 6, "url" : "https://support.virtru.com" }, { "@type" : "SiteNavigationElement", "name" : "Pricing", "position" : 7 } ], "name" : "Main Navigation" } ```